$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d/a9b42efe-2f63-4197-aa99-5049b45ab18d.mft File: a9b42efe-2f63-4197-aa99-5049b45ab18d.mft (raw, json) Hash identifier: Xyh1sumFSUpR56yN2d+pkXParzLFZ2rsSkNtGHlEQgg= Subject key identifier: 77:F5:60:7A:56:AB:9D:AA:04:6F:3C:F1:E4:E9:88:58:18:17:FD:5B Authority key identifier: 1E:4D:9B:6B:F6:72:87:3F:1D:CC:14:40:3C:C8:4C:B0:59:74:F2:24 Certificate issuer: /CN=a9b42efe-2f63-4197-aa99-5049b45ab18d Certificate serial: 010D0C9F4328584B963C2B068EE14472AB4F0E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d/a9b42efe-2f63-4197-aa99-5049b45ab18d.mft Manifest number: 010D0C9F4328584073E3A9494DAB9F86958DD97D Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: a9b42efe-2f63-4197-aa99-5049b45ab18d.crl (hash: JcFQsQAVqZ3zQ71gfXt1gk13yUp0hD5NyBHQlFgsL0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d/a9b42efe-2f63-4197-aa99-5049b45ab18d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d/a9b42efe-2f63-4197-aa99-5049b45ab18d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2b:06:8e:e1:44:72:ab:4f:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b42efe-2f63-4197-aa99-5049b45ab18d Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=030c4947-6c26-4f62-859b-f0354ff6de2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:7a:32:ea:1f:77:1d:80:6a:c2:f1:71:d0: 0e:9f:6e:f8:4d:da:50:e9:75:a7:39:38:30:9b:0a: c9:10:cd:07:c9:6f:69:93:6c:8f:fa:9f:d1:38:7a: 31:a7:2c:cf:f3:63:a6:01:7e:94:f2:f3:d6:4e:32: 0a:04:05:f3:bd:5f:c6:32:bc:06:e9:77:ea:47:0d: e2:fb:85:12:62:4b:83:de:e0:49:75:2b:c0:5b:4e: a5:42:8c:d2:8b:a2:a2:0b:bf:47:49:a6:cf:04:18: d1:50:e3:27:5a:a2:93:6a:f4:e5:36:09:43:7b:2d: c7:d5:f0:ae:20:b2:89:47:96:71:52:41:0e:46:13: 30:fa:34:3d:d5:5f:d6:cc:a8:64:65:e1:19:cf:12: 2a:20:2c:cd:26:6c:16:39:d1:2e:6c:b1:6a:fb:cc: cb:f9:6e:7b:6c:4b:d0:c2:8e:ed:38:3a:86:2c:88: b1:97:bf:82:2d:aa:03:d9:fd:1c:4d:57:c3:4c:a1: 70:01:90:7b:2d:be:d4:82:74:cb:d5:46:0a:d8:62: f0:2e:3d:0b:80:a2:8e:11:19:5f:6f:61:28:69:d8: 32:0a:52:e1:44:9c:f0:2c:c4:54:93:f9:cc:3b:85: 3c:a2:9e:3f:2e:5b:39:1d:da:ee:fd:d9:07:ce:d5: 08:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F5:60:7A:56:AB:9D:AA:04:6F:3C:F1:E4:E9:88:58:18:17:FD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d/a9b42efe-2f63-4197-aa99-5049b45ab18d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d/a9b42efe-2f63-4197-aa99-5049b45ab18d.crl X509v3 Authority Key Identifier: keyid:1E:4D:9B:6B:F6:72:87:3F:1D:CC:14:40:3C:C8:4C:B0:59:74:F2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a9b42efe-2f63-4197-aa99-5049b45ab18d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:94:46:2c:26:f1:c7:80:74:5b:ec:0c:ac:f5:79:69:b8:03: cf:ed:bb:b2:00:0d:3e:de:a9:fa:c5:8f:75:f4:e6:97:92:5c: 8b:1f:1f:be:98:cf:4e:e5:1d:45:91:a5:96:d4:7e:90:ea:f5: 91:2b:7f:d1:f5:f5:fd:5a:73:08:df:28:fc:07:91:d0:50:2b: 33:25:63:3b:98:71:f4:df:60:ff:18:85:31:d0:97:52:65:22: d7:d9:5b:c3:de:e6:0f:1b:72:1a:c0:0a:11:49:52:52:2f:8c: cc:64:79:ab:dc:89:33:1b:26:7c:1e:b2:68:d7:33:0c:b9:27: e3:60:c5:bb:1a:d3:da:82:19:1a:20:1e:bd:82:3b:dd:ff:1b: 8a:0b:49:f1:9f:31:83:d5:b5:ca:0e:f3:86:1e:a0:dc:16:b4: 86:8b:be:f5:84:b9:0b:97:29:db:71:a6:bd:e1:49:b8:db:21: d9:84:3c:a7:f7:38:f8:f1:12:8e:9f:e1:a1:b9:ed:4c:69:52: 57:41:34:5e:cd:38:98:e1:63:d4:69:e4:d9:1e:37:05:f8:80: 63:8f:bc:0b:c9:40:50:12:b7:d1:5f:66:eb:44:b9:a6:1a:d6: 6a:90:3b:fd:ed:2e:b7:3c:ff:42:70:5c:a9:51:44:8f:af:28: c5:26:25:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPCsGjuFEcqtPDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliNDJlZmUtMmY2My00MTk3LWFhOTktNTA0OWI0NWFi MThkMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk MDMwYzQ5NDctNmMyNi00ZjYyLTg1OWItZjAzNTRmZjZkZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSV6Muofdx2AasLxcdAOn274TdpQ6XWnOTgw mwrJEM0HyW9pk2yP+p/ROHoxpyzP82OmAX6U8vPWTjIKBAXzvV/GMrwG6XfqRw3i +4USYkuD3uBJdSvAW06lQozSi6KiC79HSabPBBjRUOMnWqKTavTlNglDey3H1fCu ILKJR5ZxUkEORhMw+jQ91V/WzKhkZeEZzxIqICzNJmwWOdEubLFq+8zL+W57bEvQ wo7tODqGLIixl7+CLaoD2f0cTVfDTKFwAZB7Lb7UgnTL1UYK2GLwLj0LgKKOERlf b2EoadgyClLhRJzwLMRUk/nMO4U8op4/Lls5Hdru/dkHztUIywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHf1YHpWq52qBG888eTpiFgYF/1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hOWI0 MmVmZS0yZjYzLTQxOTctYWE5OS01MDQ5YjQ1YWIxOGQvYTliNDJlZmUtMmY2My00 MTk3LWFhOTktNTA0OWI0NWFiMThkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTliNDJlZmUtMmY2My00MTk3LWFh OTktNTA0OWI0NWFiMThkL2E5YjQyZWZlLTJmNjMtNDE5Ny1hYTk5LTUwNDliNDVh YjE4ZC5jcmwwHwYDVR0jBBgwFoAUHk2ba/Zyhz8dzBRAPMhMsFl08iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hOWI0MmVmZS0yZjYzLTQxOTctYWE5OS01MDQ5 YjQ1YWIxOGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjlEYsJvHHgHRb7Ays9Xlp uAPP7buyAA0+3qn6xY919OaXklyLHx++mM9O5R1FkaWW1H6Q6vWRK3/R9fX9WnMI 3yj8B5HQUCszJWM7mHH032D/GIUx0JdSZSLX2VvD3uYPG3IawAoRSVJSL4zMZHmr 3IkzGyZ8HrJo1zMMuSfjYMW7GtPaghkaIB69gjvd/xuKC0nxnzGD1bXKDvOGHqDc FrSGi771hLkLlynbcaa94Um42yHZhDyn9zj48RKOn+Ghue1MaVJXQTRezTiY4WPU aeTZHjcF+IBjj7wLyUBQErfRX2brRLmmGtZqkDv97S63PP9CcFypUUSPryjFJiU4 -----END CERTIFICATE-----Generated at Tue Oct 21 15:19:03 2025 by rpki-client